PT-2017-2586

🗓️ 26 Jul 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 1 Views

Remote buffer overflow in ImageMagick WritePTIFImage() function causes an exception.

Reporter	Title	Published	Views	Family All 418
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Graphicsmagick	15 Jan 201901:20	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Graphicsmagick	15 Jan 201901:20	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Graphicsmagick	15 Jan 201901:20	–	githubexploit
AlpineLinux	CVE-2017-15277	12 Oct 201708:00	–	alpinelinux
BDU FSTEC	The vulnerability of the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory during file conversion. This vulnerability allows attackers to trigger a access violation for the function’s address.	10 Aug 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadSUNImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.	10 Aug 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMPCImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure.	10 Aug 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadYCBCRImage function (coder/ycbcr.c) in the console-based image editing tool ImageMagick, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	3 Nov 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadGIFImage function (coder/gif.c) in the cross-platform library for handling graphics, GraphicsMagick, and the console-based graphic editor ImageMagick, allowing an intruder to gain unauthorized access to protected information.	19 Nov 201900:00	–	bdu_fstec
Cloud Foundry	USN-3681-1: ImageMagick vulnerabilities \| Cloud Foundry	14 Jun 201800:00	–	cloudfoundry

Source	Link
bugzilla	www.bugzilla.suse.com/1067184
ubuntu	www.ubuntu.com/security/CVE-2017-17504
suse	www.suse.com/security/cve/CVE-2017-13769
bugzilla	www.bugzilla.suse.com/1052744
ubuntu	www.ubuntu.com/security/CVE-2018-5357
ubuntu	www.ubuntu.com/security/CVE-2017-12983
ubuntu	www.ubuntu.com/security/CVE-2017-18251
ubuntu	www.ubuntu.com/security/CVE-2017-18008
bugzilla	www.bugzilla.suse.com/1054757
ubuntu	www.ubuntu.com/security/CVE-2017-12693

14 Jun 2018 00:00Current

CVSS 3.16.5

CVSS 27.8

CVSS 39.8

EPSS0.19193

ImageMagick buffer overflow WritePTIFImage()coders/tiff.c exception